This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37332e302f32342d3234203d3e203238313834.roa File: 3138392e38392e37332e302f32342d3234203d3e203238313834.roa (raw, json) Hash identifier: YR1Fpv+xTEZhaPMj2FN1EPOUgVkc3QcFl0/qTgkxNjk= Subject key identifier: 77:A9:26:0B:91:5C:7C:90:88:88:1F:54:EC:BE:2B:02:D7:FE:B8:A8 Certificate issuer: /CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40 Certificate serial: 4CB2ABF6E45EAD4A59A55D9A4AB98C70C58AD66B Authority key identifier: 4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer Subject info access: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37332e302f32342d3234203d3e203238313834.roa Signing time: Thu 08 Jan 2026 20:45:36 +0000 ROA not before: Thu 08 Jan 2026 20:40:36 +0000 ROA not after: Thu 07 Jan 2027 20:45:36 +0000 asID: 28184 IP address blocks: 189.89.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 Jan 2026 23:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:b2:ab:f6:e4:5e:ad:4a:59:a5:5d:9a:4a:b9:8c:70:c5:8a:d6:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40 Validity Not Before: Jan 8 20:40:36 2026 GMT Not After : Jan 7 20:45:36 2027 GMT Subject: CN=77A9260B915C7C9088881F54ECBE2B02D7FEB8A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:89:88:99:ae:17:34:a9:5e:ff:a2:e5:29:37: 1d:06:d5:25:00:bb:42:d5:df:d1:70:2a:f7:96:3e: a3:87:39:45:ec:a1:ed:d2:99:a1:37:03:8d:30:04: 9e:d5:a4:d6:86:a1:74:5a:a9:0e:a3:99:fe:a1:3f: 6c:bb:fa:a6:28:51:85:ed:83:bf:95:4a:bc:08:71: b3:1b:e5:7b:64:94:f2:28:43:08:63:92:b5:7e:a1: b3:0b:67:bf:33:9a:ad:c2:40:49:f1:04:cb:21:fe: 89:e4:d6:4e:27:e6:82:bd:f4:e1:a9:78:fe:75:38: 34:fc:c6:53:64:18:a6:22:bc:50:05:e5:0e:e2:41: e5:83:cf:10:11:ce:f7:47:10:7b:e5:9d:ad:89:9c: c0:c7:94:02:32:de:44:07:5e:a6:88:4a:bf:19:4c: 53:ee:62:75:90:da:c3:d8:36:e1:63:2d:21:fa:f9: f4:60:17:58:b8:4b:14:40:ad:4d:a3:36:b7:66:f5: 1d:c6:95:3e:a9:2c:22:3e:52:fd:f8:55:c6:f1:b9: 40:80:3b:b3:ad:58:2b:52:40:59:2e:a8:10:83:78: 8d:21:8c:f5:07:0b:e5:54:4a:17:5f:6b:43:36:d1: 87:fb:50:17:95:97:6c:45:36:9f:46:3c:ca:d8:46: d5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A9:26:0B:91:5C:7C:90:88:88:1F:54:EC:BE:2B:02:D7:FE:B8:A8 X509v3 Authority Key Identifier: keyid:4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37332e302f32342d3234203d3e203238313834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.89.73.0/24 Signature Algorithm: sha256WithRSAEncryption 91:a7:79:d2:4a:a7:5f:8c:14:36:19:42:df:be:59:8b:52:fd: 50:e4:47:95:7f:57:2c:0d:fb:d3:53:2a:b3:8a:2f:59:a9:da: be:8f:6d:e3:e4:e1:1d:43:67:22:cb:24:a5:33:70:5c:82:5a: 48:c6:e9:e5:84:ec:5d:83:6a:51:62:42:1b:54:cd:d8:d3:7a: f3:e5:4f:80:c5:6d:94:ea:cc:f8:0e:27:e7:1c:e5:b3:97:fc: 4a:e5:3d:6e:4b:51:2a:3d:db:c2:14:ae:35:6d:f3:85:33:11: 04:84:06:96:37:dd:ea:df:f6:00:99:78:b1:22:28:61:37:96: b7:74:10:95:92:18:e9:de:0e:93:e5:e4:ff:c8:c7:03:f3:d6: e4:96:b9:94:04:a8:ef:b1:17:da:fb:48:2b:84:0a:44:d6:a5: 27:bd:97:14:39:ed:41:17:46:45:bf:b1:b9:93:48:92:e6:fd: c6:bb:7e:94:99:f0:46:c6:3a:aa:af:e6:4a:a3:0d:71:c4:f5: a2:9e:1f:c0:a7:d4:47:3a:70:37:08:42:83:1c:e8:c6:7c:51: 45:ea:3c:91:9c:84:32:a0:aa:02:d7:23:82:96:d7:d4:29:fa: a0:72:d4:da:83:10:a6:2d:ad:8f:c8:70:84:5a:44:8e:f7:c8: 9c:a1:79:d9 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUTLKr9uRerUpZpV2aSrmMcMWK1mswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENGQzc4MEJBNzBEOUFDRDcxNEE0RUYyNkIxMTQ3NzhD QkYzOUY0MDAeFw0yNjAxMDgyMDQwMzZaFw0yNzAxMDcyMDQ1MzZaMDMxMTAvBgNV BAMTKDc3QTkyNjBCOTE1QzdDOTA4ODg4MUY1NEVDQkUyQjAyRDdGRUI4QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOiYiZrhc0qV7/ouUpNx0G1SUA u0LV39FwKveWPqOHOUXsoe3SmaE3A40wBJ7VpNaGoXRaqQ6jmf6hP2y7+qYoUYXt g7+VSrwIcbMb5XtklPIoQwhjkrV+obMLZ78zmq3CQEnxBMsh/onk1k4n5oK99OGp eP51ODT8xlNkGKYivFAF5Q7iQeWDzxARzvdHEHvlna2JnMDHlAIy3kQHXqaISr8Z TFPuYnWQ2sPYNuFjLSH6+fRgF1i4SxRArU2jNrdm9R3GlT6pLCI+Uv34VcbxuUCA O7OtWCtSQFkuqBCDeI0hjPUHC+VUShdfa0M20Yf7UBeVl2xFNp9GPMrYRtU9AgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUd6kmC5FcfJCIiB9U7L4rAtf+uKgwHwYDVR0j BBgwFoAUTPx4C6cNms1xSk7yaxFHeMvzn0AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUt1Vmg2MnNlaG5Hcm40ZWd3RlZRUFZWa3RqbW9kdFB3NXFwUEtWa1JL emUvMC80Q0ZDNzgwQkE3MEQ5QUNENzE0QTRFRjI2QjExNDc3OENCRjM5RjQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDRkM3ODBCQTcwRDlBQ0Q3 MTRBNEVGMjZCMTE0Nzc4Q0JGMzlGNDAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FLdVZoNjJzZWhuR3JuNGVnd0ZWUVBWVmt0am1vZHRQdzVxcFBLVmtSS3plLzAv MzEzODM5MmUzODM5MmUzNzMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMx MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAL1ZSTANBgkqhkiG9w0BAQsFAAOCAQEAkad50kqnX4wU NhlC375Zi1L9UORHlX9XLA3701Mqs4ovWanavo9t4+ThHUNnIsskpTNwXIJaSMbp 5YTsXYNqUWJCG1TN2NN68+VPgMVtlOrM+A4n5xzls5f8SuU9bktRKj3bwhSuNW3z hTMRBIQGljfd6t/2AJl4sSIoYTeWt3QQlZIY6d4Ok+Xk/8jHA/PW5Ja5lASo77EX 2vtIK4QKRNalJ72XFDntQRdGRb+xuZNIkub9xrt+lJnwRsY6qq/mSqMNccT1op4f wKfURzpwNwhCgxzoxnxRReo8kZyEMqCqAtcjgpbX1Cn6oHLU2oMQpi2tj8hwhFpE jvfInKF52Q== -----END CERTIFICATE-----Generated at Fri Jan 9 16:30:32 2026 by rpki-client